On-Site App Sec Engineer – Cloud-Native DevSecOps

Bespoke Technologies, Inc.; Reston (VA); Sur place; USD 140 000 - 180 000; Plein temps

Résumé du poste

Bespoke Technologies, Inc. is seeking an experienced Application Security Engineer for a new on-site contract in Reston, VA.

You will integrate security across the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications. The role requires hands-on expertise in application security, secure coding, threat modeling, and cloud-native security, with OCI experience preferred.

Qualifications

• 8+ years in application security or related fields.
• Experience with secure SDLC and threat modeling.
• Hands-on with Python/JS/SQL and secure coding practices.
• Familiar with SAST/DAST/SCA and vulnerability remediation.
• Experience in cloud-native security, OCI preferred.
• Ability to communicate risk to technical and non-technical stakeholders.

Responsabilités

• Integrate security across the software development lifecycle.
• Collaborate with developers and cloud engineers to design secure systems.
• Conduct threat modeling, secure design reviews, and code reviews.
• Lead security testing and remediation in CI/CD pipelines.
• Advise on IAM, encryption, and access controls in cloud environments.
• Stay current with security tooling and best practices.

Connaissances

Application security

Secure SDLC

DevSecOps

Cloud security

Threat modeling

Secure code review

Python/JS/SQL

CI/CD pipelines

Kubernetes/Docker

OCI experience

Formation

Bachelor's in engineering or CS

Master's degree preferred

Outils

SAST

DAST

SCA

Secrets scanning

Container security

Kubernetes

Docker

CI/CD tooling

Cloud tooling

Description du poste

Bespoke Technologies, Inc. is seeking an experienced Application Security Engineer for a new on-site contract in Reston, VA.

You will integrate security across the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications. The role requires hands-on expertise in application security, secure coding, threat modeling, and cloud-native security, with OCI experience preferred.